Sign in

Uses JWT access tokens and a rotating refresh cookie.